Privacy notice

Who you are dealing with

A small team in the UK, trading as VESPERA. Contact details are at the bottom of this page.

What is collected

When you order: your name, delivery address, email, what you ordered and a phone number if you give one. Checkout and the order record are run by Shopify; ordering by email instead, the same details arrive in that email. A phone number goes to the courier only where the service needs one.

Card details never touch this site. Payments are handled by the payment provider at checkout — we see that a payment succeeded, never your card number.

When you visit: Cloudflare, which hosts the site, sees each visit’s IP address to deliver the page and to protect it from abuse, such as someone hammering the firmware server. Visits are counted with Cloudflare Web Analytics, which uses no cookies and does not follow you across other sites.

In your browser: your cart, your light or dark mode preference, and Studio’s small previews of the pictures you have sent to your unit are stored on your own device. They are not sent anywhere, and clearing your browser data clears them.

Studio

Studio talks to your unit over the USB cable, from your own browser. The browser asks you which device to open, and Studio sees only the one you pick.

• Your WiFi password goes down the cable to the unit and nowhere else — not to us, not to any server and not into any log.
• Pictures, drawings and settings go from your browser to your unit. They are not uploaded anywhere.
• What you type into Studio’s terminal is answered in your browser and not sent anywhere.
• Installing firmware with a code: the code and the chip’s ID go to our server to be checked. The chip’s ID is kept with a scrambled copy of the code until the code runs out, so that a code works on one unit.
• Updating without a code: the unit’s model, firmware version and chip ID go to our server with the unit’s proof that it runs our firmware. They are checked and not kept.

Why it is needed

To build your machine, invoice it, ship it and support it. Records of the sale are kept because UK tax rules require it. The chip ID is kept only so a code cannot be used on more units than it was made for.

Who else sees it

Only whoever has to:

• Shopify and the payment provider, to take the order and the payment
• Royal Mail, to deliver the parcel
• Cloudflare, which hosts the site and its firmware server
• the email provider that carries replies

Nothing is sold, rented or used for advertising — ever.

Discretion

Parcels carry no branding and no product name, and nothing on the outside hints at what is inside. Your bank statement carries no branding or product names either. If a delivery method would not suit where you live, say so before ordering and we will arrange another.

How long it is kept

Order records for six years, as UK tax rules require. Messages for as long as they are useful in supporting you. A chip ID kept with a code is deleted when the code runs out, usually after 3 days.

Your rights

You can ask for a copy of what is held about you, have it corrected, or have it deleted where the law does not require it to be kept — just message us. If you are unhappy with how it is handled, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

None for advertising, none for tracking, so there is no cookie banner to click through — just the local storage described above. Shopify’s checkout pages set their own cookies, under Shopify’s privacy policy.

Contact

Message us on EroScripts, or write to [email protected]. A postal address is available on request and appears on your invoice.